Hi Sophos Community,
This KB article outlines how to deploy the Sophos XG Firewall DMZ in Microsoft Azure using a dual NIC architecture. This architecture has the benefit of being able to use Sophos Synchronized Security.
The DMZ can be deployed as a private DMZ or a public DMZ:
Microsoft recommends that private and public DMZ are separated.
Regards,
FloSupport | Community Support Engineer